GHSA-6859-2qxq-ffv2

ghsaUSosv

pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability

view advisory published 2025-09-05Licence: CC-BY-4.0

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-9636US	—	0.23% (13th)	—	2025-09-04
pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unautho…

references

External citations — patches, advisories, analysis.

https://github.com/pgadmin-org/pgadmin4PACKAGE
https://github.com/pgadmin-org/pgadmin4/commit/cdeb18fcbb139a200b5a4779c82f9cd1aaaf3c89WEB
https://github.com/pgadmin-org/pgadmin4/issues/9114WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-9636ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan